Promise Technology WebPam Pro-E devices allow remote attackers to conduct XSS, HTTP Response Splitting, and CRLF Injection attacks via JavaScript code in a PHPSESSID cookie.

Promise Technology WebPam Pro-E devices allow remote attackers to conduct XSS, HTTP Response Splitting, and CRLF Injection attacks via JavaScript code in a PHPSESSID cookie.

Promise Technology WebPam Pro-E devices allow remote attackers to conduct XSS, HTTP Response Splitting, and CRLF Injection attacks via JavaScript code in a PHPSESSID cookie. Promise Technology WebPam Pro-E The device contains a cross-site scripting vulnerability.Information may be obtained and information may be altered. PromiseTechnologyWebPamPro-Edevices is a data center device from PromiseTechnology. A security vulnerability exists in the PromiseTechnologyWebPamPro-E device due to a failure to filter parameters by PHPSESSIDcookie